Privacy Policy

1. Who we are

VEADO Pty Ltd (ABN 43 672 859 782), trading as VEADO IT Consulting, is an Australian AI and cloud consultancy based in Haberfield, NSW. In this policy, “VEADO”, “we” and “us” mean VEADO Pty Ltd. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What this policy covers

This policy covers personal information we handle through:

• this website, veado.com.au;
• our consulting services and our dealings with clients and prospective clients; and
• the AI reply services we run for client businesses, which read the messages their customers send them by email, WhatsApp or Instagram and prepare replies on the client business’s behalf.

When we run an AI reply service, we act for the client business and under its instructions. The client business remains responsible for its relationship with its own customers. If you are a customer of a business that uses our services, that business’s own privacy policy also applies.

3. What we collect

Website visitors

• Usage data through Google Analytics 4: pages viewed, device and browser type, and approximate location. Google Analytics uses cookies; you can block them in your browser.
• Contact form details: your name, email address and message. Our form is delivered by Formspree.

Clients and prospective clients

• Names, job titles, business contact details, and our correspondence and meeting notes.

AI reply services, on behalf of client businesses

• Messages that people send to the client business, including names, email addresses, phone numbers and anything they choose to include.
• The replies the client business’s staff send, which we use to match their writing style.
• Documents and facts the client business chooses to share with us so replies are accurate.
• Account identifiers needed to receive and deliver messages, such as a WhatsApp phone number ID or an Instagram account ID.

4. Information from Meta platforms

Where a client business connects its WhatsApp Business account or Instagram professional account to our service through Meta’s sign-in or sign-up flows, we receive, with that business’s authorisation:

• messages sent to the business’s account, and the replies the business sends from its own apps;
• the identifiers of the business’s accounts and of the people who message it, which are needed to deliver replies; and
• delivery status for replies we send on the business’s behalf.

We use this information only to prepare draft replies for the client business’s staff, to send replies its staff have approved, and to improve drafts for that same business. We do not sell it, use it for advertising, or combine it across client businesses. We do not use it to train or improve any AI model that serves other businesses.

5. How we use information

• To respond to enquiries and provide, bill for and support our services.
• To prepare, and where approved send, replies on behalf of client businesses.
• To keep our services secure, find and fix faults, and prevent misuse.
• To understand how our website is used, so we can improve it.
• To meet our legal obligations.

We only send you marketing if you have agreed to it or it relates to services you already use. Every marketing email lets you opt out.

6. How AI is used

Our AI reply services use Claude models made by Anthropic. Depending on the service, the models run either in Australia through Amazon Bedrock or through Anthropic’s own API in the United States.

In our reply-drafting service, a person at the client business reviews and approves every reply before it is sent. Where a client business uses our automatic enquiry-response service instead, replies are sent automatically within rules that business sets.

Under their commercial terms, our AI providers do not use the information we send them to train their models. Anthropic may keep inputs and outputs for a limited time under its terms, currently up to 30 days, and longer only where needed to investigate misuse.

7. Where information is stored, and overseas disclosure

We store information in Amazon Web Services’ Sydney region. For our reply-drafting platform, each client business’s information is kept in a separate AWS account dedicated to that business.

Some of our service providers handle information outside Australia:

• Anthropic, United States: AI model processing for some services.
• Meta: messages on WhatsApp and Instagram are handled under Meta’s own terms.
• Google: website analytics.
• Formspree, United States: website contact form delivery.
• Microsoft or Google: email services, where a client business uses them.

Before disclosing personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the Australian Privacy Principles, including through contract terms.

8. How long we keep information

• AI reply services: message text and drafts are kept for 90 days, then deleted. Writing-style examples and the facts a client business provides are kept while that business uses our services.
• When a client business leaves: we export its information on request, then delete it within 30 days, including by closing the AWS account that held it.
• Enquiries and client records: kept for as long as we need them for the relationship and our legal obligations, then deleted.

9. How we protect information

We protect information with encryption in transit and at rest, access limited to the people and systems that need it, separate accounts for each client business on our reply-drafting platform, audit logging, and regular review of our controls.

If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

10. Access, correction and complaints

You can ask for access to the personal information we hold about you, or ask us to correct it, by emailing info@veado.com.au. We respond within 30 days. If we act for a client business, we may pass your request to that business.

If you have a complaint about how we have handled your information, email us first and we will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

11. Deleting your information

To ask us to delete information about you, including information received through WhatsApp or Instagram, email info@veado.com.au with the subject “Data deletion request”. Tell us which business you contacted and how, for example the WhatsApp number or Instagram account. We confirm your identity, delete the information within 30 days unless the law requires us to keep it, and confirm by email when it is done.

A client business can disconnect its accounts at any time. For WhatsApp or Instagram, remove VEADO’s app from the business’s Meta settings, under Business Integrations. We then stop receiving its messages and delete its information as described in section 8.

12. Changes and contact

We will update this policy when our practices change, and show the date of the latest version below.

Questions: info@veado.com.au · +61 (0)2 9164 2333 · VEADO Pty Ltd, Haberfield NSW 2045, Australia.

Last updated 24 September 2026.